An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17. Which upgrade path maintains synchronization of the HA session (and prevents net

The correct answer is B. Upgrade one major version at a time. When you upgrade from one PAN-OS feature release version to a later feature release, you cannot skip the installation of any feature release versions in the path to your target release. In addition, the recommended upgrade path includes installing the latest maintenance release i

Submitted by zhang_li· Apr 18, 2026Operate

Question

An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17. Which upgrade path maintains synchronization of the HA session (and prevents network outage)?

Options

AUpgrade directly to the target major version
BUpgrade one major version at a time
CUpgrade the HA pair to a base image
DUpgrade two major versions at a time

How the community answered

(41 responses)

A
5% (2)
B
88% (36)
D
7% (3)

Explanation

When you upgrade from one PAN-OS feature release version to a later feature release, you cannot skip the installation of any feature release versions in the path to your target release. In addition, the recommended upgrade path includes installing the latest maintenance release in each release version before you install the base image for the next feature release version. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-pan-os/upgrade-the- firewall-pan-os/determine-the-upgrade-path

Topics

#PAN-OS Upgrade#High Availability#Upgrade Path#HA Synchronization

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice